Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa
File:                     3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier:          ygnIvxWNgcK1plnIZrJxs3dfEQPzyHrhskTC9g4HRXE=
Subject key identifier:   D2:C6:E3:41:17:3E:EC:A1:C5:D7:77:01:92:36:1D:F7:6D:34:72:1E
Certificate issuer:       /CN=3693BDB8D9539D53978D42B71411F72DA033C8CE
Certificate serial:       54A6B87687E76B1FA66AC7BC7B90506D2E9F4D5E
Authority key identifier: 36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa
Signing time:             Sun 03 May 2026 02:44:57 +0000
ROA not before:           Sun 03 May 2026 02:39:57 +0000
ROA not after:            Sun 02 May 2027 02:44:57 +0000
asID:                     138131
IP address blocks:        103.133.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl
                          rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a6:b8:76:87:e7:6b:1f:a6:6a:c7:bc:7b:90:50:6d:2e:9f:4d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3693BDB8D9539D53978D42B71411F72DA033C8CE
        Validity
            Not Before: May  3 02:39:57 2026 GMT
            Not After : May  2 02:44:57 2027 GMT
        Subject: CN=D2C6E341173EECA1C5D7770192361DF76D34721E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:bc:a1:ca:88:a1:85:81:b9:45:00:dd:f6:
                    38:95:50:79:49:ff:a3:ef:fa:36:55:a8:53:a1:78:
                    26:8d:7e:22:0e:9f:49:ce:9f:3b:45:a9:3e:de:f0:
                    7b:78:0a:e2:4f:43:4a:ba:20:12:bd:00:96:68:ed:
                    ce:d7:67:dc:16:56:1c:84:95:3d:21:6f:ec:e7:8e:
                    02:92:28:bb:79:03:51:a4:96:81:f1:3b:b9:31:7c:
                    be:22:a6:a0:71:bc:be:13:88:ef:95:04:0f:1e:65:
                    cc:0d:33:4f:7e:1c:30:1b:25:e5:84:73:88:95:2e:
                    8b:0f:26:80:de:93:c2:44:86:28:02:4b:74:af:3c:
                    92:54:31:13:89:da:e8:be:cd:8d:7b:78:6a:80:fc:
                    d9:cf:d4:f5:d3:1e:80:19:cf:6b:7a:a7:51:e6:b3:
                    a3:96:4f:5a:c8:ee:73:db:47:21:db:d6:3a:20:15:
                    19:ab:ac:60:4a:8e:5f:d6:64:68:a4:7d:5c:d5:21:
                    bd:54:89:c2:dd:6d:0e:93:38:9a:7a:eb:ab:89:95:
                    31:5a:d1:ce:62:97:20:f1:e0:08:31:3b:b5:86:e7:
                    33:89:60:4e:bc:f4:70:5a:58:46:2d:7c:97:cb:02:
                    24:0a:ea:9e:f5:c2:9e:f8:13:29:46:83:4a:f2:5b:
                    8e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C6:E3:41:17:3E:EC:A1:C5:D7:77:01:92:36:1D:F7:6D:34:72:1E
            X509v3 Authority Key Identifier:
                keyid:36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:61:36:d5:6b:79:99:c6:82:a3:4d:00:0a:bd:9d:cb:e3:2e:
         04:ee:a0:81:06:b7:7a:17:96:e8:73:19:1b:11:c6:37:3c:89:
         24:ad:77:2a:3d:fe:1a:eb:50:4d:82:9e:0a:1a:ea:7b:9d:08:
         48:a2:f2:31:92:47:ef:79:47:1f:6b:f4:b7:eb:38:94:a2:a5:
         46:a2:e6:c5:df:97:f6:b8:d8:24:8d:73:32:a2:34:7a:8c:d9:
         f0:75:08:41:26:db:cd:ab:11:0c:22:8c:a1:96:f9:9e:d2:82:
         fc:e3:82:69:a6:49:8c:bc:ca:af:11:9c:f0:df:4d:87:8f:9d:
         1f:50:40:08:c9:66:72:ee:7e:71:7d:de:33:cd:69:43:f7:23:
         91:e1:8a:f7:ae:48:d6:e9:cb:78:94:50:68:ac:f6:e2:f5:f5:
         0f:9e:58:74:da:6b:3c:f6:3b:af:59:f2:00:b8:1d:35:af:36:
         fd:ea:24:4e:62:59:a1:36:11:d5:1f:bf:21:9e:7e:0d:fc:57:
         3e:14:ea:2f:50:1c:41:7b:aa:9d:9d:78:30:f9:24:36:bb:7f:
         1d:5a:b5:a8:bf:25:ad:b1:a4:ed:93:02:5a:ca:25:a3:70:d8:
         99:4e:d9:fd:10:99:98:64:72:9a:a8:88:21:92:07:8a:6f:91:
         1f:f3:80:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:05:30 2026 by rpki-client